Raytha CMS User Enumeration Vulnerability in Password Reset Functionality

A user enumeration vulnerability has been identified in Raytha CMS versions prior to 1.5.0, specifically within the password reset feature. The issue arises from discrepancies in response messages, which can inadvertently reveal the validity of login credentials. This flaw enables attackers to conduct brute force attacks using valid usernames or email addresses.

Impact

Exploitation of this vulnerability could lead to unauthorized account access by allowing attackers to reset passwords for valid users.

Remediation

Users can upgrade to Raytha CMS version 1.5.0 or later to address this vulnerability.